[gptalk] Re: Server Operator BuiltinGroup

From: Sirini k <srini_08872@xxxxxxxxx>

To: gptalk@xxxxxxxxxxxxx

Date: Thu, 12 Oct 2006 07:47:50 -0700 (PDT)

Bob,
If i'm able to grant user mgmt group to administer "SO" group members that
solves my problem.
thanks
Srini
Bobby T <bob@xxxxxxxxxxxxxxxxxx> wrote:
Srini
So, if I'm understanding you, you're trying to give the User Management
group ability to manage "SO" users, with out giving them all the SO rights?
Or am I still missing what you're trying to solve?
Bob
_____
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Sirini k
Sent: Wednesday, October 11, 2006 7:46 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Server Operator BuiltinGroup
Thanks Bob,
But that will not solve my problem, it only controls the membership of the
SO group ,let me explain my requirement:
Our's is huge user base account where all user management is done thru user
management group and these members are less privileged admins than SO, they
can't reset the member accounts of server operators group due to Server
operators Dacl is Protected by PDCE and i don't want to give the user
management group a higher privileges than the present one.
Secondly we are don't want to use any butilin groups, we wanted to fine tune
the Roles for admin tasks and grant proper permission's & previlalges to
these roles.
Srini
Bobby T wrote:
Srini,
Perhaps another way to do this is to create a security group and then make
it Resticted to the Server Operators via GPO. That is, if you need to
control who's in that group, you can do it with a security group, then place
permissions on the security group to control who is place in it.
Not sure if that will solve your problem..
Bob
_____
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Sirini k
Sent: Monday, October 09, 2006 4:45 PM
To: gptalk@xxxxxxxxxxxxx
Cc: srini_08872@xxxxxxxxx
Subject: [gptalk] Server Operator BuiltinGroup
Greetings,
I have a very basic knowledge on GPO and I'm reaching to this community to
find an answer to my question /doubt.
I'm need of a security group which has similar permissions and privileges
granted to Built-in Server operator group in Windows 2003 AD.
Basically I don't want to use the built-in group but rather create a new
group and grant this group all permissions and privileges granted to
built-in Server operators group can this is achievable thru GPO, if so can
some one guide me plz if not what are reasons it can't be done.
Highly appreciate any inputs on this topic,
Many thanks in advance
Srini
_____
Want to be your own boss? Learn how on Yahoo!
Small Business.
_____
Yahoo! Messenger with Voice. Make
t=39663/*http://voice.yahoo.com> PC-to-Phone Calls to the US (and 30+
countries) for 2¢/min or less.
---------------------------------
Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+
countries) for 2¢/min or less.